Amazon Web Services Interview Question

Rank 1-5 for best action to take when the customer is concerned about SQL injection 1 - install a network firewall 2 - Install a web app firewall 3 - gate the IPs via a network security group 4 - install software that analyzes the SQL and blocks it if it's malicious 5 - add a captcha